hyperframes-registry
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches registry metadata and configuration information from the official HeyGen GitHub repository.
- [COMMAND_EXECUTION]: The skill utilizes a specialized CLI (
hyperframes) to perform installation tasks, such as adding blocks or components to the local filesystem. - [INDIRECT_PROMPT_INJECTION]: The skill incorporates an attack surface by processing data from an external registry and local component files during the integration process.
- Ingestion points: Data is ingested through
curlrequests to the registry manifest and by reading content from files installed in thecompositions/directory. - Boundary markers: There are no specific delimiters or instruction-ignore warnings defined for the interpolation of component code snippets.
- Capability inventory: The skill uses
curlfor network discovery, thehyperframesCLI for file system modifications, and performs manual file read/write operations. - Sanitization: The instructions do not specify any sanitization or validation steps for the content being merged into the host composition.
Audit Metadata